Small Number of Malicious Tor Exit Relays Snooping Traffic

A small number of Tor exit relays are misbehaving, conducting man-in-the-middle attacks and monitoring encrypted traffic from users of the anonymity network. Researchers from Karlstad University in Sweden published a paper this week examining the malicious behavior of some Tor exit relays and fou...

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 8710)

This update fixes the following issues : - memory corruption in opensslparsex509. CVE-2013-6420 - man-in-the-middle attacks by specially crafting certificates CVE-2013-4248 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

MicroSD Cards Vulnerable to MITM, Hacking

Researchers demonstrated yesterday at the Chaos Communication Congress in Hamburg that they could write arbitrary code onto various SD memory cards, a hack that could give attackers the ability to perform man-in-the-middle attacks on devices housing the cards, as well as give users access to an...

Scientific Linux Security Update : ca-certificates on SL6.x (noarch) (20131220)

It was found that a subordinate Certificate Authority CA mis-issued an intermediate certificate, which could be used to conduct man-in-the-middle attacks. This update renders that particular intermediate certificate as untrusted. After installing the update, all applications using the...

CVE-2013-6422

The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification CURLOPTSSLVERIFYPEER, also disables the CURLOPTSSLVERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM...

RedHat Update for ca-certificates RHSA-2013:1866-01

Check for the Version of ca-certificates OpenVAS Vulnerability Test RedHat Update for ca-certificates RHSA-2013:1866-01 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CentOS Update for nss CESA-2013:1861 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ca security update

CentOS Errata and Security Advisory CESA-2013:1866 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2013-December/082249.html Affected packages: ca-certificates Upstream details at: https://access.redhat.com/errata/RHSA-2013:1866...

RHEL 5 / 6 : nss (RHSA-2013:1861)

Updated nss packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Network Security Services NSS is a set of libraries designed to support the cross-platform...

PHP 5.3.x < 5.3.28 Multiple OpenSSL Vulnerabilities

According to its banner, the version of PHP installed on the remote host is 5.3.x prior to 5.3.28. It is, therefore, potentially affected by the following vulnerabilities : - A flaw exists in the PHP OpenSSL extension's hostname identity check when handling certificates that contain hostnames wit...

Microsoft Digital Certificates Security Advisory (2916652)

This host is missing an important security update according to Microsoft advisory 2916652. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-201311-14 : QtCore, QtGui: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-14 QtCore, QtGui: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QtCore and QtGui. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

Moderate: Red Hat Security Advisory: python security, bug fix, and enhancement update

Updated python packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

GLSA-201310-21 : MediaWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201310-21 MediaWiki: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary...

CentOS 6 : rubygems (CESA-2013:1441)

An updated rubygems package that fixes three security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RHEL 6 : rubygems (RHSA-2013:1441)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:1441 advisory. RubyGems is the Ruby standard for publishing and managing third-party libraries. It was found that RubyGems did not verify SSL connections...

Scientific Linux Security Update : rubygems on SL6.x (noarch) (20131017)

It was found that RubyGems did not verify SSL connections. This could lead to man-in-the-middle attacks. CVE-2012-2126 It was found that, when using RubyGems, the connection could be redirected from HTTPS to HTTP. This could lead to a user believing they are installing a gem via HTTPS, when the...

RedHat Update for php53 RHSA-2013:1307-01

Check for the Version of php53 OpenVAS Vulnerability Test RedHat Update for php53 RHSA-2013:1307-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2012-4092

The management interface in the Central Software component in Cisco Unified Computing System UCS does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683...

Ubuntu Update for pyopenssl USN-1965-1

Check for the Version of pyopenssl OpenVAS Vulnerability Test $Id: gbubuntuUSN19651.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for pyopenssl USN-1965-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...